Endpoint/Device Security

The New Jersey Cybersecurity and Communications Integration Cell has warned that the Phorpiex botnet has been used since April to send millions of phishing emails as part of a large-scale LockBit Black ransomware campaign, reports BleepingComputer.

A recent report showed that users' credentials are being stolen by malicious Android apps using phishing URLs mimicking well-known services that include Facebook, GitHub, Instagram, LinkedIn, Microsoft, Netflix, PayPal, Proton Mail, Snapchat, Tumblr, X, WordPress, and Yahoo, though it is unclear what the campaign's distribution vector is, reports The Hacker News.

Security researchers at Kaspersky's ICS CERT division revealed critical vulnerabilities in Telit Cinterion cellular modems, which are popularly used in the industrial, healthcare, and telecommunications sectors, BleepingComputer reports.

Attacks taking over F5 BIG-IP devices could be conducted by exploiting high-severity vulnerabilities impacting the BIG-IP Next Central Manager, tracked as CVE-2024-21793 and CVE-2024-26026, The Hacker News reports.

Threat actors have leveraged Ivanti Connect Secure and Policy Secure zero-day vulnerabilities, tracked as CVE-2023-46805 and CVE-2024-21887, to facilitate the deployment of the Mirai botnet, reports Security Affairs.

Operational technology and internet-of-things cybersecurity provider Nozomi Networks and Google's Mandiant have forged an expanded threat intelligence collaboration aimed at bolstering industry and enterprise cybersecurity, reports SiliconAngle.

Security pros warn that this flaw could affect just about every IP-routing based VPN.